Ghidra C++ Class and Run Time Type Information Analyzer

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.

A library to read physical memory and system-wide virtual memory.

Literally, the perfect injector.

Defeating Windows User Account Control

Identifying Virtual Table Functions using VTBL IDA Pro Plugin + Deviare Hooking Engine

Tool for PDB generation from IDA Pro database

Community guide to securing and improving privacy on macOS.

A Turing complete ROP compiler

JSON for Modern C++

A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research

Detours with just single dependency - NTDLL

A library that simplifies intercepting application function calls using managed code and the .NET Core runtime

Fast persistent recoverable log and key-value store + cache, in C# and C++.

Ghidra is a software reverse engineering (SRE) framework

120+ interactive Python coding interview challenges (algorithms and data structures). Includes Anki flashcards.

Windows Calculator: A simple yet powerful calculator that ships with Windows

WinDBG Anti-RootKit Extension

disable most common windowsx64 systems patchguard

The system call intercepting library

Parsing gigabytes of JSON per second : used by Facebook/Meta Velox, the Node.js runtime, ClickHouse, WatermelonDB, Apache Doris, Milvus, StarRocks

Porting Windows Dynamic Link Libraries to Linux

Windows kernel hacking framework, driver template, hypervisor and API written on C++

Reads and writes .NET assemblies and modules

.NET debugger and assembly editor

C++20, x86/x64 Hooking Libary v2.0

IDA Pro plugin to aid PS4 user mode ELF reverse engineering.

The ultimate Xbox 360 development PC companion.